Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
File: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft (raw, json)
Hash identifier: qz1V6aJqpy4uwFwGR8CkvIvL80hBIXJpYHwTEnUdrDY=
Subject key identifier: 99:B9:41:A3:10:3B:3B:62:4F:9A:79:23:11:7C:0B:A1:5F:7D:67:83
Authority key identifier: 9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
Certificate issuer: /CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Certificate serial: 0199221ED7AF691AD225ADF196DA26D5EEFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 03:01:10 +0000
Manifest this update: Sun 07 Sep 2025 03:01:10 +0000
Manifest next update: Mon 08 Sep 2025 03:01:10 +0000
Files and hashes: 1: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl (hash: 7YQ/5JckeBtXrU9ITPlbB3rERSkIi7+E1J+qChoYWmI=)
2: qtN5JDorwotYpcUYWZc-ptH61p4.roa (hash: fKxhmPTYMHuqQdNEmPm2wnJirNcSsOemwlg1fw0Aem0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:d7:af:69:1a:d2:25:ad:f1:96:da:26:d5:ee:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Validity
Not Before: Sep 7 03:01:10 2025 GMT
Not After : Sep 8 03:01:10 2025 GMT
Subject: CN=99b941a3103b3b624f9a7923117c0ba15f7d6783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:06:60:dd:58:57:89:3a:d7:ed:a6:79:3c:80:
d8:df:b4:97:4e:7c:28:af:c7:3b:d6:db:f2:d5:7e:
70:aa:6a:d9:98:ba:5d:ca:a3:72:ae:5f:29:59:6d:
0e:a1:2c:c7:d6:29:55:04:e0:6b:b6:df:ba:1c:80:
82:34:4d:e2:60:aa:89:53:24:ca:96:c4:96:04:7c:
e2:66:8e:c6:7a:2a:d2:c0:2e:ad:1b:13:89:3e:35:
a8:f0:13:e1:04:65:ca:77:22:f1:0b:fe:6b:3b:3e:
3c:d5:50:c4:9d:df:a3:42:2f:fc:58:58:01:1e:ef:
9f:af:35:42:41:77:09:a7:59:c3:33:de:10:24:68:
42:39:a6:b1:a4:f2:24:96:b0:ef:20:76:e5:52:c3:
09:ca:89:73:85:c2:dc:09:f8:6b:85:cc:90:b3:23:
0e:59:5d:79:82:80:86:57:cf:66:ea:84:6b:d0:5f:
2e:cc:33:7d:6b:27:bd:4a:9c:6f:a8:38:17:94:02:
29:14:04:e7:d9:68:ed:80:84:45:93:01:ff:38:98:
26:c7:97:2a:03:76:0b:31:88:25:98:31:73:39:75:
cf:b9:75:0e:1b:ec:77:84:f2:9a:92:fc:98:92:07:
ca:30:ca:be:6e:49:41:99:bc:ab:4f:56:d8:31:11:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B9:41:A3:10:3B:3B:62:4F:9A:79:23:11:7C:0B:A1:5F:7D:67:83
X509v3 Authority Key Identifier:
keyid:9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e6:d6:56:d3:73:86:33:69:41:a5:85:25:d0:ae:01:fd:06:
6b:68:d9:cb:57:19:7c:df:89:a0:d8:6b:48:ac:09:97:b6:22:
8d:d4:d1:8b:39:b6:a2:eb:19:d3:d0:d8:3c:9e:cd:df:53:81:
cb:37:12:22:dd:98:f4:8b:5b:13:5d:eb:30:4d:37:45:e8:c1:
6c:5d:02:7e:bd:cb:54:f4:61:db:e7:7b:ca:61:a1:61:35:95:
9e:cc:9d:a3:30:17:05:54:17:b8:cd:7f:ac:77:16:f3:0a:91:
d2:bf:86:bf:bc:79:8f:bb:98:d2:11:6c:37:8a:fe:25:b8:ad:
65:80:cc:6d:01:d6:ab:98:c6:80:eb:d0:20:5a:ab:6c:ee:a3:
c0:d8:0a:c0:f0:df:09:78:18:00:75:32:eb:23:d8:3c:2b:93:
e9:3e:7c:0e:45:97:22:c2:24:a0:11:8d:36:da:d6:d9:d1:9c:
1a:4e:cf:b0:3c:b0:fc:08:4f:26:3c:a1:08:29:07:34:de:5e:
28:f1:f2:92:c4:0e:cd:5d:10:29:bd:5b:6e:83:b0:c4:1d:1e:
f2:af:64:f5:c6:a0:c5:ce:7b:83:ca:39:72:75:64:84:fe:9c:
be:88:dc:22:65:b9:05:b3:7d:45:6a:9c:73:37:a0:03:ff:c2:
ae:de:44:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:51 2025 by rpki-client